Broadcom WPS Flaw Lets Nearby Attackers Gain Root RCE on Wi-Fi Routers Without Password; Belgian ISP Devices Unpatched
Researcher Quentin Kaiser (QTNKSR) disclosed a memory corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It allows an unauthenticated attacker within wireless range to disclose memory and execute code, including as root, on vulnerable routers. The attacker does not need the Wi-Fi password, network membership or a co…